Leading the Application Security team at Clio, focusing on building scalable security solutions. Collaborating across teams and leading security initiatives in a hybrid work environment.
Responsibilities
Hire, mentor, and grow a team of Offensive Application Security engineers
Define the long-term roadmap for the offensive security team
Collaborate with other Clio teams to help develop products or features leveraging secure development practices
Lead security incidents, recovery, and remediation efforts, along with post-incident forensics
Participating in due diligence during acquisitions to assess product and organizational security postures
Triaging and administering our Bug Bounty program
Code framework level solutions to provide blessed path tooling for developers and proactively prevent security flaws
Drive security awareness and knowledge amongst the product organization
Provide detailed guidance and support to teams in vulnerability remediation
Build, write rules, and implement tools for automated application scanning, static analysis and custom tooling
Perform penetration testing and proactive research to detect new attack vectors
Perform reactive incident response and remediation when a security event occurs
Project manage effectively by motivating the team, ensuring they meet and exceed targeted goals and objectives
Elevate and educate our security culture within Clio, contributing to our cultural values
Requirements
Experienced security leader with software development background
Experience working with full-stack developers
Security certifications like OSCP, OSWE, etc.
Prior experience with Ruby, Rails, Python, and/or Django applications
Benefits
Competitive, equitable salary with top-tier health benefits
Dental and vision insurance
Hybrid work environment, with expectation for local Clions to be in office min. twice per week
Flexible time off policy, with an encouraged 20 days off per year
$2000 annual counseling benefit
RRSP matching and RESP contribution
Clioversary recognition program with special acknowledgement at 3, 5, 7, and 10 years
Senior Endpoint Security Engineer at Metric5 managing CrowdStrike Falcon deployment for Department of Treasury. Overseeing sensors rollout and resolving high - tier architectural issues in diverse IT environments.
Cybersecurity Sales Specialist responsible for driving sales across Fortune 250 accounts. Engage with C - suite leaders to enhance cybersecurity solutions and strategies across global enterprises.
Sales Specialist for Data Security driving growth in Public Sector and MidMarket teams at Proofpoint. Partnering with core sales reps and delivering value in Data Security portfolio.
Principal Product and Process Security Certification Expert at NXP driving security evaluation and certification for embedded products. Responsible for compliance with cybersecurity standards and certifications in emerging markets.
Physical Security Technology Manager responsible for administering and optimizing security technology platforms at Dominium. Engaging in multiple locations to enhance system performance and reliability.
Junior Consultant in Cyber Security at MKS4U IT - Beratungs GmbH providing security assessments and client consulting. Focused on developing and implementing security strategies within a hybrid working environment.
Teamlead for IT Perimeter Security Engineering at Axians Switzerland, leading a security team and managing client consultations. Engaging in technical engineering of security solutions while fostering team development.
Senior Product Security Engineer at Persona focusing on security infrastructure and AI tooling. Drive vulnerability lifecycle and collaborate with engineering teams on secure feature development.
Senior Software Engineer developing IAM systems for identity verification at Persona. Engaging in security - focused engineering to ensure user identity safety and compliance.
Software Engineer developing and building IAM systems at Persona, focused on identity verification infrastructure. Collaborating across teams to ensure secure practices in deploying AI tooling.